Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: d5tCVWh3lM3llx3qQnRblxLgM5MAxFTm7WBLmr2QSLc=
Subject key identifier: 27:15:CF:BC:A0:2E:84:96:10:08:F5:D2:CF:01:F3:91:68:54:6E:5F
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 01987450709D0363F2AA6FA13EB6F4FB28E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:01:25 +0000
Manifest this update: Mon 04 Aug 2025 09:01:25 +0000
Manifest next update: Tue 05 Aug 2025 09:01:25 +0000
Files and hashes: 1: 5IXXShSjVO7kS96xQpiSIMcLu-s.roa (hash: E67HmQuHQzZNq0YpnE5MfAwnl2TJ0rHXn4iIRjzaf4g=)
2: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: 36sIocFkMBNqlPoE3wfU3Pp/QCy2PtTF7BtyYtqixNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:70:9d:03:63:f2:aa:6f:a1:3e:b6:f4:fb:28:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Aug 4 09:01:25 2025 GMT
Not After : Aug 5 09:01:25 2025 GMT
Subject: CN=2715cfbca02e84961008f5d2cf01f39168546e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:bc:74:fe:ac:f9:40:16:2d:64:46:6a:95:
75:ef:8e:20:48:ca:21:44:8d:ec:0d:4f:04:27:ad:
db:8c:a3:4a:2a:47:74:29:d5:3b:0d:a1:27:4d:49:
63:4d:32:62:7c:b8:55:29:f6:6f:35:53:87:6e:7d:
57:ce:7c:fb:6e:88:5e:4e:90:af:79:d4:6f:a8:d4:
c4:ec:44:18:55:54:ac:3e:e7:04:c4:14:b8:89:6d:
bb:44:51:63:42:83:a1:e2:6e:78:44:40:47:85:5a:
ad:ca:8c:b4:6d:89:35:11:96:74:dc:18:40:68:e9:
77:91:7a:65:78:de:63:4d:7c:e6:e3:b5:ca:c3:1f:
ec:86:32:f9:c8:2f:09:59:ac:78:00:f6:eb:e7:ea:
79:56:ce:e7:69:1b:47:a4:8f:88:ba:62:3b:77:7a:
35:bb:bd:fd:4e:8b:b6:19:06:ec:b9:57:a1:49:a2:
fe:ae:6b:36:12:f2:bb:47:1a:36:17:ec:dd:07:21:
ec:c2:52:5b:ee:61:37:4c:65:20:66:4a:dd:ec:11:
b4:4b:a7:98:5b:73:49:fa:ad:a4:34:e8:40:c3:97:
ef:9e:17:cd:06:81:3f:e8:a5:1a:43:d2:d5:a5:15:
ec:61:7e:64:8c:6c:5a:5f:5c:a3:63:bd:04:80:92:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:15:CF:BC:A0:2E:84:96:10:08:F5:D2:CF:01:F3:91:68:54:6E:5F
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ae:95:45:9e:c1:64:e4:75:b7:17:0e:51:bb:95:48:30:2c:
ae:21:79:07:f2:36:63:73:42:7d:86:c8:11:b3:f7:7d:4e:b1:
e6:5f:d4:70:76:93:1f:1b:14:b8:e6:76:8c:55:d3:09:39:4d:
58:32:db:ec:cb:4e:60:2c:42:8e:6e:ae:22:70:d0:90:05:ba:
74:61:9b:aa:f3:db:3c:7a:6e:a3:66:97:a5:6e:f8:cd:c9:d9:
39:32:6a:cd:6e:91:7c:6c:56:2e:2f:29:76:42:58:1d:6e:bd:
a0:fc:de:58:11:29:fd:1a:49:be:a0:8e:ee:10:1e:5c:63:98:
8a:73:fd:f0:9e:ab:49:7d:b8:ec:f3:cf:2f:76:47:ad:47:de:
af:16:c8:69:d6:34:5c:20:99:db:cc:e6:e6:02:7b:63:da:ee:
b2:88:63:7e:86:9c:80:df:e5:c2:31:59:c5:08:e6:24:e8:53:
6f:ff:2a:d7:e6:56:0c:55:6a:e8:b5:91:1a:ce:cb:bc:4e:41:
70:7c:1e:ae:e0:c3:71:28:3c:57:f5:53:68:85:d8:d8:c6:01:
15:a6:97:68:55:c4:77:09:87:a1:da:0a:90:62:fc:2f:6c:b7:
08:54:e3:89:64:ed:44:84:f7:2c:83:81:a9:fc:f5:03:12:f9:
20:a7:f8:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UHCdA2Pyqm+hPrb0+yjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl
NzA5NzkwHhcNMjUwODA0MDkwMTI1WhcNMjUwODA1MDkwMTI1WjAzMTEwLwYDVQQD
EygyNzE1Y2ZiY2EwMmU4NDk2MTAwOGY1ZDJjZjAxZjM5MTY4NTQ2ZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22e8dP6s+UAWLWRGapV1744gSMoh
RI3sDU8EJ63bjKNKKkd0KdU7DaEnTUljTTJifLhVKfZvNVOHbn1Xznz7boheTpCv
edRvqNTE7EQYVVSsPucExBS4iW27RFFjQoOh4m54REBHhVqtyoy0bYk1EZZ03BhA
aOl3kXpleN5jTXzm47XKwx/shjL5yC8JWax4APbr5+p5Vs7naRtHpI+IumI7d3o1
u739Tou2GQbsuVehSaL+rms2EvK7Rxo2F+zdByHswlJb7mE3TGUgZkrd7BG0S6eY
W3NJ+q2kNOhAw5fvnhfNBoE/6KUaQ9LVpRXsYX5kjGxaX1yjY70EgJI02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcVz7ygLoSWEAj10s8B85FoVG5fMB8GA1UdIwQY
MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt
MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw
LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq6VRZ7B
ZOR1txcOUbuVSDAsriF5B/I2Y3NCfYbIEbP3fU6x5l/UcHaTHxsUuOZ2jFXTCTlN
WDLb7MtOYCxCjm6uInDQkAW6dGGbqvPbPHpuo2aXpW74zcnZOTJqzW6RfGxWLi8p
dkJYHW69oPzeWBEp/RpJvqCO7hAeXGOYinP98J6rSX247PPPL3ZHrUferxbIadY0
XCCZ28zm5gJ7Y9rusohjfoacgN/lwjFZxQjmJOhTb/8q1+ZWDFVq6LWRGs7LvE5B
cHweruDDcSg8V/VTaIXY2MYBFaaXaFXEdwmHodoKkGL8L2y3CFTjiWTtRIT3LIOB
qfz1AxL5IKf4Mg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:09 2025 by rpki-client